This proposal has been implemented

Reviewed by @product and accepted in the main project
It is funded by Barcelona City Council
Developed by Platoniq
Available in release 0.27 via #9271

Cookie policy: accept and reject

InnovacióDemocràtica 08/04/2022 14:07

Finished

Ref. GDPR02

Is your feature request related to a problem? Please describe.

As a visitor when I visit a Decidim installation I could be tracked for analytics purposes, but it isn’t mentioned to me.

Describe the solution you’d like

We must offer a way to accept this tracking or to reject it.

Right now, the current behavior is a cookie warning that only shows the information that we use Cookies:

We need to explain better what cookies do we use, why we’re using these cookies, and let the user choose which cookies they want to use.

Describe alternatives you’ve considered

There are JavaScript libraries that already tackle this issue, as it’s a classic.

Orejime

https://orejime.netlify.app/ (External link)
https://github.com/Quentinchampenois/decidim-module_cookies (External link)

Cookie Consent
https://github.com/osano/cookieconsent (External link)
https://www.osano.com/cookieconsent/download/ (External link)

Additional context
Cookie Law European Union and GDPR.
See discussion on MetaDecidim (External link)

We really like how this is solved in https://omastadi.hel.fi/ (External link)

Does this issue could impact on users private data?
Yes, it’s about cookies and improving the (optional) tracking mechanisms that implementers can have on Decidim.

Acceptance criteria

As an implementer when installing Decidim I have a way of enabling this setting as a module
As an implementer, I can configure which cookies are for which purpose and which are required for the app to work

Comment

Fingerprint

The piece of text below is a shortened, hashed representation of this content. It is useful to ensure the content has not been tampered with, as a single modification would result in a totally different value.

Value: f1bca81831670b5ce0bbf2fa8819613eeff936e128d0bb85bf91a579bf3188d8

Source:

{"body":{"en":"<p>Ref. GDPR02</p><p><strong>Is your feature request related to a problem? Please describe.</strong></p><p>As a visitor when I visit a Decidim installation I could be tracked for analytics purposes, but it isn’t mentioned to me.</p><p><strong>Describe the solution you’d like</strong></p><p>We must offer a way to accept this tracking or to reject it.</p><p>Right now, the current behavior is a cookie warning that only shows the information that we use Cookies:<strong><br></strong> <strong><img src=\"https://i.imgur.com/XCGcYdE.png\"></strong></p><p>We need to explain better what cookies do we use, why we’re using these cookies, and let the user choose which cookies they want to use.</p><p><strong>Describe alternatives you’ve considered</strong></p><p>There are JavaScript libraries that already tackle this issue, as it’s a classic.</p><ol><li>Orejime<strong><br></strong> <strong><img src=\"https://i.imgur.com/sWBQqjA.png\"><br></strong> <strong><img src=\"https://i.imgur.com/R8tsIEj.png\"></strong></li></ol><p><a href=\"https://orejime.netlify.app/\" rel=\"noopener noreferrer\" target=\"_blank\" class=\"external-link-container\">https://orejime.netlify.app/&nbsp;(External link)</a><strong><br></strong> <a href=\"https://github.com/Quentinchampenois/decidim-module_cookies\" rel=\"noopener noreferrer\" target=\"_blank\" class=\"external-link-container\">https://github.com/Quentinchampenois/decidim-module_cookies&nbsp;(External link)</a></p><ol><li>Cookie Consent<strong><br></strong> <a href=\"https://github.com/osano/cookieconsent\" rel=\"noopener noreferrer\" target=\"_blank\" class=\"external-link-container\">https://github.com/osano/cookieconsent&nbsp;(External link)</a><strong><br></strong> <a href=\"https://www.osano.com/cookieconsent/download/\" rel=\"noopener noreferrer\" target=\"_blank\" class=\"external-link-container\">https://www.osano.com/cookieconsent/download/&nbsp;(External link)</a></li></ol><p><strong>Additional context<br></strong> Cookie Law European Union and GDPR.<strong><br></strong> See <a href=\"https://meta.decidim.org/processes/roadmap/f/122/proposals/15215\" rel=\"noopener noreferrer\" target=\"_blank\" class=\"external-link-container\">discussion on MetaDecidim&nbsp;(External link)</a></p><p><strong>We really like how this is solved in </strong><a href=\"https://omastadi.hel.fi/\" rel=\"noopener noreferrer\" target=\"_blank\" class=\"external-link-container\">https://omastadi.hel.fi/&nbsp;(External link)</a></p><p><strong>Does this issue could impact on users private data?<br></strong> Yes, it’s about cookies and improving the (optional) tracking mechanisms that implementers can have on Decidim.</p><p><strong>Acceptance criteria</strong></p><ul><li>As an implementer when installing Decidim I have a way of enabling this setting as a module</li><li>As an implementer, I can configure which cookies are for which purpose and which are required for the app to work</li></ul>"},"title":{"en":"Cookie policy: accept and reject "}}

This fingerprint is calculated using a SHA256 hashing algorithm. In order to replicate it yourself, you can use an MD5 calculator online and copy-paste the source data.

Essential

Preferences

Analytics and statistics

Marketing

Cookie policy: accept and reject

Please log in

Cookie settings

Essential

Preferences

Analytics and statistics

Marketing

Cookie policy: accept and reject

Confirm

Please log in

Share